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METHOD AND SYSTEM TO 
REMOTELY GRANT LIMITED 
ACCESS TO SOFTWARE OPTIONS 
RESIDENT ON A DEVICE 

Background of Invention 

[0001] The present invention relates generally to a system to enable software-based 

options, and more particularly, to remotely grant limited access to software options 
resident on a device. 

[0002] Medical diagnostic devices and supporting systems, such as medical imaging 
systems, have become increasingly complex in recent years. Examples of such 
systems include magnetic resonance imaging (MRI) systems, computed tomography 
(CT) systems, ultrasound and x-ray systems, and positron emission tomography (PET) 
systems. These systems include many different software-based options, some of 
which are not used depending on customer needs and costs. To add to the complexity 
of each particular imaging system, many facilities today incorporate a variety of such 
devices all of which may not be configured identically. In larger facilities, the systems 
may be networked to permit common management and control. Further, such systems 
may be networked with a picture archiving and communication system (PACS) for 
storing digitized image data for subsequent retrieval and reconstruction. Additionally, 
teleradiology systems that involve transmitting digitized image data to remote 
locations for review and diagnosis by specialized physicians and/or radiologists may 
be used as well. 

[0003] 

Because these medical diagnostic systems are used by different facilities with 
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differing needs, not all of these systems operate identically. That is, although identical 
software may be installed at the factory, certain options are not desired or licensed by 
a customer or user, and therefore are not enabled when delivered. If a customer later 
wants to add these options to their devices, a license would need to be executed and 
service personnel with appropriate training would have to physically travel to the 
location where the devices are present to enable the software in order for the 
customer to gain access to a particular option. 

[0004] Improvements in computer networks have greatly facilitated the task of offering 
assistance to remote facilities with medical imaging devices. In particular, rather than 
having to call a service center and speak with a technician or engineer, or await a 
return call from the service center, network technologies have facilitated proactive 
techniques wherein the service center may contact the medical diagnostic devices 
directly to check the status of the remote devices. Further advancements have been 
proposed to provide remote service to medical diagnostic systems in an effort to 
provide a level of service on a continual and interactive basis as needed by many 
facilities. In one such system, a service center can interactively receive messages via a 
network and can respond automatically to the messages if configured correctly. Data 
required to analyze the state of operation of the medical diagnostic devices can be 
transferred during an electronic connection. This technique greatly facilitates 
identification of system problems, allows questions to be posed to the subscribing 
service provider, facilitates transfer of updates and imaging protocols, and permits 
standard and customized reports to be transmitted to subscribing systems or 
stations. The interactive aspect of this technique allows the medical diagnostic facility 
to remain current on services provided by the centralized service facility and to readily 
communicate with the centralized service facility. 

[0005] While such advancements in the provision of remote services to medical 
diagnostic devices have greatly enhanced the level of service and information 
exchange, they have not been used to remotely grant access and permit use of 
software options resident on such devices. 

[0006] 

There is a need for a system where a qualified customer would have the ability to 
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access a particular option already resident in memory of a device consistent with a 
customer's specific usage patterns. For example, in order to limit personnel costs and 
improve efficiency, many health care facilities schedule medical procedures, including 
medical imaging procedures, in a time block. However, health care facilities would 
traditionally purchase twenty-four hour access to an option and then only use the 
option for a portion of that twenty-four hours. As a result, the capabilities of a 
particular device are not optimally utilized. 

[0007] It would therefore be desirable to permit access to optional, device capabilities on 
a pay-per-use or limited access basis, such that the device capabilities are available to 
a user on an as-needed basis. It would be further desirable to provide a warning of 
impending access expiration so that a renewing access request may be submitted and 
approved before expiration if desired, or if not requested, appropriate notice can be 



~J3 provided detailing that the option will no longer be available. 

m Summary of Invention 



A~ [0008] The present invention is directed to a system and method to remotely permit use 
O of resident software options overcoming the aforementioned concerns. 



% [0009] 



The present invention includes a technique that includes hardware and software to 
identify a customer and, if desirable, license, permit access to, and enable options in 
remotely installed devices. Such a system includes a customer station that is distant 
from a centralized facility and has at least one software option that is controlled by a 
computer. A communications network connects the centralized facility to the 
customer station such that the centralized facility is capable of receiving and 
authenticating a customer identification, validating an access request, and creating an 
electronic enabler in response to the access request. The communications network 
relays data from the centralized facility to the customer station and includes a 
communications portion in the centralized facility and in the customer station. The 
communications network connects the centralized facility to the customer station 
through an external communications network, such as the Internet, direct dial-up 
links, or a wireless platform. Once an electronic enabler is generated by the 
centralized facility, the centralized facility transmits the electronic enabler through the 
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communications network to the customer station to permit access to the option. In 
one embodiment, the electronic enabler is automatically downloaded, installed, and 
verified. Once operation of the option is verified, an electronic notification is 
transmitted to the customer providing notification that access is now available. 

[0010] In accordance with an aspect of the present invention, a method to remotely 

permit use of resident software options is disclosed that includes receiving an access 
request from a customer or user of a remotely located device seeking access to an 
option resident in memory of the device. The method further includes determining 
whether to grant limited access in response to the access request according to 
whether a set of criteria have been met, and if the criteria are met, generating an 
electronic enabler or software key configured to permit access to the option in 
response to an access grant. The method also includes transmitting the electronic 
enabler to the device, and automatically enabling customer access to the option in the 
device in response to reception of the electronic enabler. 



HP [001 1 ] In accordance with another aspect of the invention, an access granting system is 
disclosed comprising a device having at least one disabled option resident on a 



computer programmed to control the device and a centralized facility located remotely 
from the device and having at least one access computer. The access computer is 
programmed to receive from a qualified customer a request to access and use a 
disabled option and grant access and use, on a pay-per-use basis, of the disabled 
option for a predetermined time period. 

[001 2] The present invention further includes a computer data signal embodied in a 

carrier wave and representing a sequence of instructions which, when executed by at 
least one processor, causes the processor to receive at a centralized facility an access 
request from a user to access an option resident in a remote device. The sequence of 
instructions also causes the computer to determine whether the end user is qualified, 
and if so, grant limited access to the option resident in the remote device. A software 
key is generated by the computer to allow limited access to the option and sends the 
software key to the device, wherein the software key enables limited user access to 
the option. 



Page 4 of 22 




[001 3] Various other features, objects and advantages of the present invention will be 
made apparent from the following detailed description and the drawings. 

Brief Description of Drawings 

[0014] The drawings illustrate a preferred embodiment as presently contemplated for 
carrying out the invention. 

[0015] In the drawings: 

[001 6] Fig. 1 is a block diagram of a system for which the present invention is 
implemented therein. 

[0017] Fig. 2 is a flow chart showing a process of the present invention and implemented 
in the system of Fig. 1 . 

Detailed Description 

[001 8] Referring to Fig. 1 1 an overview block diagram of a medical diagnostic and service 
networked system 10 is shown which includes a plurality of remote customer stations, 
such as Customer A referenced with numeral 12, and Customer B referenced with 
numeral 1 4. It is understood, that the number of customer stations can be limitless, 
but two specific embodiments are shown with Customer A and Customer B, which will 
be further explained hereinafter. The customer stations 12, 14 are connected to a 
centralized facility 16 through a communications link, such as a network of 
interconnected server nodes 1 8 or a remote link 20. Although a single centralized 
facility is shown and described, it is understood that the present invention 
contemplates the use of multiple centralized facilities, each capable of communication 
with each customer station. Each customer station has operational software associated 
therewith which can be configured, serviced, maintained, upgraded, monitored, 
enabled or disabled by the centralized facility 1 6. 

[0019] 

The various systems disclosed are configured to be selectively linked to the 
centralized facility 16 by either the remote link 20, or in the example of customer 
station 12, a laptop computer 22 connected to an internal network 24 of Customer A. 
Such selective linking is desirable to provide upgrades, maintenance, service, and 
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general monitoring of the various systems and equipment at a customer site, which 
includes accessing data from the systems and transmitting data to the systems, for 
example. 

[0020] In general, a customer site may have a number of devices such as a variety of 

medical diagnostic systems of various modalities. As another example, in the present 
embodiment, the devices may include a number of networked medical image scanners 
26 connected to an internal network 24 served by a single scanner 28 having a 
workstation configured to also act as a server, or configured as a stand-alone server 
without a medical image scanner associated therewith. Alternately, a customer station, 
or customer site 14 can include a number of non-networked medical image scanners 
30, 32, and 34 each having a computer or work station associated therewith and 
having an internal modem 36, 38, and 40 to connect the remote customer station to a 
communications link, such as the Internet 1 8 through links 37, 39, and 41 , 
respectively, to communicate with the centralized facility 1 6. Internet 1 8 is shown in 
phantom to indicate that an external communications network can include Internet 
1 8, together with communication links 29, 37, 39, and 41., or alternatively, can 
include direct dial-up links through dedicated lines, an intranet, or public 
communications systems. 

[0021] It is understood that each of the network scanners 26 has its own workstation for 
individual operation and are linked together by the internal network 24 so that the 
customer can have a centralized management system for each of the scanners. 
Further, such a system is provided with communications components allowing it to 
send and receive data over a communications link 29. Similarly, for the non- 
networked medical image scanners at remote customer station 14, each of the 
scanners 30, 32, and 34 have individual communications links 37, 39, and 41. 
Although Fig. 1 shows each of these links connected through an open network 18, 
these links can permit data to be transferred to and from the systems over a 
dedicated network as well. 

[0022] 

The embodiment shown in Fig. 1 contemplates a medical facility having such 
systems as magnetic resonance imaging (MRI) systems, ultrasound systems, x-ray 
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systems, computed tomography (CT) systems, as well as positron emission 
tomography (PET) systems, or any other type of medical imaging system, however, the 
present invention is not so limited. Such facilities may also provide services to 
centralized medical diagnostic management systems, picture archiving and 
communications systems (PACS), teleradiology systems, etc. Such systems can be 
either stationary and located in a fixed place and available by a known network 
address, or be mobile having various network addresses. In the embodiment shown in 
Fig. 1 , each customer station 12,14 can include any combination of the 
aforementioned systems, or a customer station may have all of a single type of 
system. A customer station can also include a single medical image scanner. Mobile 
diagnostic systems can be configured similarly to that of customer station 1 2 or 
customer station 14. Such mobile diagnostic systems can include equipment of 
various modalities, such as MRI, CT, ultrasound, or x-ray systems and are mobilized 
in order to service patients at various medical facilities. 

[0023] 

A request for pay-per-use access and enablement of software-based options of 
the present invention can be initiated by authorized personnel, such as an on-line 
engineer or technician, or customer administrative personnel from a computer or 
workstation 42 in the remote link 20, which can be a part of the centralized facility 
1 6, or be separately connected to the centralized facility 1 6 by a dialup link 44 to a 
web server 46 in the centralized facility 16. Alternatively, it is contemplated that the 
system could be initialized by a laptop computer 22 connected to a customer internal 
network 24, or individually connected to each of the scanners 30, 32, or 34. The 
remote link 20 can also serve to connect the centralized facility 16 to a customer 
station by a telephone and telephone connection 48 through a conventional telephone 
network 50 and to an interactive voice recognition system (IVR) 52 in the centralized 
facility 1 6. The centralized facility 1 6 includes a number of processing systems 
including computers for the IVR system 52, an automated support center 54, the web 
server 46, and an auto checkout server 56, for processing customer and product data 
and creating an appropriate configuration file. Other processor systems include 
computers to maintain a voicemail system 58, a pager system 60, an email system 62, 
and a main frame 64, and more generally, an output report generator and notifier. 



Page 7 of 22 



Each is connectable and can transmit data through a network, such as an Ethernet 66 
with one another, and/or with at least one database 68. However, it is understood that 
the single representation of a database in Fig. 1 is for demonstrative purposes only, 
and it is assumed that there is a need for multiple databases in such a system. It is 
also understood that the IVR system is not only a voice recognition system, but can 
also process interactive keypad entry from a touchtone telephone 48. A bank of 
modems 70 is connected to the Ethernet 66 to relay data from the centralized facility 
1 6 to the remote customer stations 12,14 through a plurality of modem links 72. 

[0024] As previously discussed, each of the systems and substations described herein 
and referenced in Fig. 1 may be linked selectively to the centralized facility 1 6 via a 
network 1 8. According to the present invention, any acceptable network may be 
^_ employed whether public, open, dedicated, private, or so forth. The communications 

yg links to the network may be of any acceptable type, including conventional telephone 



lines, fiber optics, cable modem links, digital subscriber lines, wireless data transfer 
systems, or the like. Each of the systems is provided with communications interface 
(jg hardware and software of generally known design, permitting them to establish 

u network links and exchange data with the centralized facility 1 6. The systems are 

q provided with interactive software so as to configure the systems and exchange data 

Jc 

77 between the customer stations and the centralized facility 1 6. In some cases, during 

Uj periods when no data is exchanged between the customer stations and the centralized 

^ facility, the network connection can be terminated. In other cases, the network 

connection is maintained continuously. 



[0025] 



The present invention includes a method and system for granting access to and 
remotely permitting use of resident software options in a device. As previously 
indicated, the device, including medical imaging equipment, includes installed 
software that controls options that are typically enabled or disabled manually by a 
field engineer on-site after processing of an access request from a qualified customer. 
The present invention is directed toward a method and system to remotely grant 
access to and enable these resident options for a pay-per-use period in accordance 
with terms provided in an access grant. The terms of the access grant may allow 
access to a resident option for any of a number of time periods and/or usage periods 
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depending on a customer status that provides information on whether or not to grant 
access. If the customer status is qualified or favorable, then a customer may seek 
access to an option for a number of days, months, years, or a number of uses, i.e., 
100 scans. Moreover, a customer may be granted access for certain days of the week 
or hours of the day. The terms of the access grant may be defined to accommodate a 
customer's usage pattern. The software options can be accessed by a qualified 
customer or any other authorized personnel with appropriate customer identification 
at the remote customer stations 12, 1 4 or from the remote link 20. It is understood 
that such access grant can include either an express or implied license to use the 
software and the software-based option. 

[0026] From a centralized facility, and after appropriate authentication of the user and 
validation of the system identification and customer's status, an electronic enabler is 
generated in the centralized facility 16 and electronically transmitted to a device via 
the communication links 29, 37, 39, 41 , and/or 72, preferably over a private 
communication link, but other public communications systems can work equally well, 
such as direct dial-up internet, or wireless communications. As previously set forth, it 
is understood that the external communications links include a closed intranet 
system, an open public communications system, or a combination thereof. 

[0027] Referring to Fig. 2, once the method and/or computer program is initiated 100, 
customer identification is input electronically by a user or an authorized field 
engineer, at a remote customer station or a remote link, and received at the 
centralized facility 102. The centralized facility then validates the customer 
identification at 1 04. Validation is determined according to a customer identifier and a 
password. If the customer identification is not validated 106, the customer is 
prompted for a new, valid customer identification and password at 1 02. After a 
customer identification is validated 104, 108 the customer enters the particular 
software option requested and the centralized facility receives the customer request at 
1 10, together with a system identification identifying the particular device that the 
customer wishes to access, such as any of the scanners 26-34. The centralized facility 
then validates the system identification at 1 1 2. If the system identification 1 1 2 is 
invalid 1 1 4, e.g., does not register the chosen device as capable of supporting the 
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software-based option requested, for example, then the customer is prompted for a 
new license request at 1 10. If the system identification 1 12 is valid 1 16, then the 
customer's status is validated at 1 1 8. 

[0028J Whether or not to grant limited access in response to the access request is 
achieved by determining if a set of criteria have been met, which determines . the 
customer's status. A customer's status may be qualified or favorable if the centralized 
facility determines that the criteria have been met making it is desirable that the 
customer be approved and given access to the options, or unqualified or unfavorable 
if the criteria have not been met and denial of access is preferred. The set of criteria 
can be predefined in a variety of manners. For example, the criteria can require a 
current account balance or established line of credit. Alternatively, the set of criteria 
can comprise data such as a valid customer identification, a valid system 
identification, an option identifier, and a pay-per-use request identifier. In this 
manner, customer access to options can be limited to assure compliance with 
regulatory compliance, proper use of new and/or updated options as well as customer 
tj] compliance with educational training programs and maintenance schedules. 

^ Furthermore, access may be denied for delinquent or past due account balances, 

O unavailable credit, a poor credit history, or other accounting concerns. If the customer 

status is not qualified 1 22, the customer is prompted to contact a customer service 
y representative at the centralized facility 1 24. After receiving the information for 

contacting the centralized facility, the customer then exits at 125 and the algorithm 
ends 1 54. The customer may then start the system anew at 1 00 once the qualification 
concerns are addressed. 



m 



[0029] 



Once the customer's status is qualified 118,1 20, then the customer is notified at 
126. Notification message 126 is sent to the customer acknowledging receipt and 
verification of the access request. Next, an electronic enabler and, if needed, an 
automated billing invoice are generated at 1 28. The automated billing invoice 1 28 can 
then be further processed according to the accounting and billing procedures of the 
centralized facility. After generation 1 28, the electronic enabler is then downloaded 
1 30 from the centralized facility to the specific device 112, 116. The electronic 
enabler preferably is an alphanumeric software key that is programmed to operate a 
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specific software option on a particular device to avoid the possibility of unauthorized 
usage. A date/time stamp is embedded within the key and causes the software to 
expire according to the terms of the access grant. In an alternative embodiment, after 
generation of the electronic enabler 1 28, an agreement or license granting access to 
the device can be generated and sent to the customer that automatically terminates 
upon expiration of the access grant. 

[0030] After download 1 30, the electronic enabler is stored in memory of the device 1 32 
and upon activation the software program is enabled and the customer is granted 
access to the option requested. Preferably, the system automatically verifies the 
accessibility of the option and transmits an electronic verification message 1 34 from 
the centralized facility to the customer and/or the remote customer station. 

O [0031] Upon access to the resident option, the system monitors the customer's usage of 
the option 1 36 according to a set of predetermined access grant terms. Further, an 
indicator is provided to monitor each access grant term by monitoring when a 
remaining access time exceeds a certain threshold. At such time, the system transmits 
and/or displays a warning of access grant expiration 1 38. The system continues 
monitoring customer usage 1 40, 1 42 until the access grant is about to expire 1 40, 
144. If the customer and the grantor agree, and the customer's status is not 
unqualified, then the customer can renew access to the resident option under the 
same or similar terms as the original or previous access grant 1 46, 1 48. If renewal is 
chosen, then the system generates a new electronic enabler at 1 28 without requiring 
the customer to re-enter the identification data. Moreover, the system notifies 
appropriate accounting departments for billing of the new access grant. If the 
customer chooses to let the access grant expire 146, 1 50, then access to the option is 
terminated at 1 52, which ends the algorithm 1 54. 



Q 



[0032] 



Accordingly, the present invention includes a method to remotely permit use of 
software options resident in memory of a device that includes receiving an access 
request from a user of a remotely located device for permission to access a software 
option that is resident in memory of the device. Preferably, the access request is 
received by sending the request via a communication interface to a centralized facility. 
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Upon determination that a set of criteria has been met for a particular request, an 
electronic enabler, or software key, is then generated and configured to permit limited 
access to the option in response to an access grant. Preferably, the electronic enabler 
permits access to software that is already installed in the device. Moreover, to provide 
increased security, the electronic enabler may be transmitted via a private 
communication interface from a centralized facility to the device. If desirable, 
however, a public communication interface can also be utilized. Ultimately, the 
method automatically enables customer access to the option in the device in response 
to reception of the electronic enabler. 

[0033] Access to the option is realized according to a predetermined access grant or 
period which can be defined in terms of the number of uses of the option, a 
continuous use of the option for a limited time period, or a discontinuous use for a 
predetermined time duration. The method can include validating a customer 
identification and system identification at a centralized facility and upon validation, 
transmitting a message from the centralized facility to a qualified customer verifying 
receipt of the request. The method can additionally deny access to an option if a 
customer has failed to maintain a favorable or qualified customer status and can 
include granting a license for use of the software and/or the option, expressly or 
impliedly. 

[0034] The invention includes an access granting system that includes a device having at 
least one disabled option resident on a computer programmed to control the device 
and a centralized facility located remotely from the device and having at least one 
access computer. The access computer is programmed to receive from a qualified or 
favorable customer, a request to access and use a disabled option in the device and 
grant access and use, on a pay-per-use basis, of the disabled option for a 
predetermined time period, which can be defined for each customer as needed. 

[0035] 

The invention also includes a computer data signal embodied in a carrier wave and 
representing a sequence of instructions which, when executed by at least one 
processor, causes the processor to receive at a centralized facility an access request 
from a user to access an option resident in a remote device. The sequence of 
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instructions also cause the processor to determine whether the end user is qualified, 
and if so, grant limited access to the option resident in the remote device. The 
processor further generates a software key designed to allow limited access to the 
option and send the software key to the device, wherein the software key enables 
limited user access to the option. Preferably, the electronic enabler is created with 
embedded terms that control the expiration period of the option. When the expiration 
period is reached, the option is automatically disabled. It is also contemplated that the 
present invention will be capable of generating multiple electronic enablers to 
different options on a particular device. 

[0036] The present invention has been described in terms of the preferred embodiment, 
and it is recognized that equivalents, alternatives, and modifications, aside from those 
expressly stated, are possible and within the scope of the appending claims. 
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